diff --git a/.github/workflows/bsd.yml b/.github/workflows/bsd.yml
index d4e88d3..8bb5ba5 100644
--- a/.github/workflows/bsd.yml
+++ b/.github/workflows/bsd.yml
@@ -27,7 +27,7 @@ jobs:
     name: FreeBSD
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -52,7 +52,7 @@ jobs:
     name: OpenBSD
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -74,7 +74,7 @@ jobs:
     name: NetBSD
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 27ec850..a9474a4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -43,7 +43,7 @@ jobs:
           - { name: "macOS x86_64", os: macos-15-intel, cxx: clang++ }
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -100,7 +100,7 @@ jobs:
           apt-get update -qq
           apt-get install -y -qq git cmake ninja-build libzstd-dev g++ ca-certificates
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -124,7 +124,7 @@ jobs:
     name: clang-${{ matrix.version }} ${{ matrix.stdlib }} C++${{ matrix.std }}
     runs-on: ubuntu-latest
     container:
-      image: ubuntu:noble
+      image: ubuntu:resolute
     strategy:
       fail-fast: false
       matrix:
@@ -145,7 +145,7 @@ jobs:
             apt-get install -y -qq libc++-${{ matrix.version }}-dev libc++abi-${{ matrix.version }}-dev || true
           fi
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -181,7 +181,7 @@ jobs:
           - { arch: x86_64, runner: ubuntu-latest }
           - { arch: arm64, runner: ubuntu-24.04-arm }
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -204,7 +204,7 @@ jobs:
     name: Without zstd
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -241,7 +241,7 @@ jobs:
     name: LTO and installed-package consumption
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -314,7 +314,7 @@ jobs:
           - { name: "MSVC x86_64", os: windows-latest, gen: "" }
           - { name: "MSVC arm64", os: windows-11-arm, gen: "" }
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -336,7 +336,7 @@ jobs:
     name: MinGW x86_64
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -374,11 +374,11 @@ jobs:
     name: Emscripten (wasm)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
-      - uses: mymindstorm/setup-emsdk@v14
+      - uses: mymindstorm/setup-emsdk@v16
         with:
           version: latest
 
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 18043b3..7728ada 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -32,7 +32,7 @@ jobs:
     name: libFuzzer (reader)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -60,7 +60,7 @@ jobs:
           ls -l corpus
 
       - name: Restore the accumulated corpus
-        uses: actions/cache/restore@v4
+        uses: actions/cache/restore@v6
         with:
           path: corpus-cache
           key: uvfs-fuzz-corpus-${{ github.run_id }}
@@ -91,7 +91,7 @@ jobs:
 
       - name: Save the corpus for the next run
         if: always()
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v6
         with:
           path: corpus-cache
           key: uvfs-fuzz-corpus-${{ github.run_id }}
@@ -115,7 +115,7 @@ jobs:
     name: Mutation sweep
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
       - name: Install dependencies
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index 76df80c..d4afbf6 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -16,7 +16,7 @@ jobs:
     name: clang-format
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # Pinned: clang-format's output drifts between major versions, so an
       # unpinned check turns into a spurious failure the day the runner image
       # moves. The tree is formatted with this exact version.
@@ -31,7 +31,7 @@ jobs:
     name: clang-tidy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -51,7 +51,7 @@ jobs:
     name: cppcheck
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
       - name: Install dependencies
@@ -73,12 +73,12 @@ jobs:
     name: Big-endian is refused
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: A big-endian target must fail to compile, and say why
         run: |
@@ -103,7 +103,7 @@ jobs:
     name: Reproducible output
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -143,7 +143,7 @@ jobs:
     name: Command line round trip
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
diff --git a/.github/workflows/sanitizers.yml b/.github/workflows/sanitizers.yml
index db12b84..a666d46 100644
--- a/.github/workflows/sanitizers.yml
+++ b/.github/workflows/sanitizers.yml
@@ -26,7 +26,7 @@ jobs:
       matrix:
         cxx: [g++, clang++]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -50,7 +50,7 @@ jobs:
     name: ThreadSanitizer
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -133,7 +133,7 @@ jobs:
     name: Valgrind
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -163,7 +163,7 @@ jobs:
     name: libstdc++ debug mode
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           submodules: recursive
 
diff --git a/3rdparty/readerwriterqueue b/3rdparty/readerwriterqueue
index 131af2c..0991165 160000
--- a/3rdparty/readerwriterqueue
+++ b/3rdparty/readerwriterqueue
@@ -1 +1 @@
-Subproject commit 131af2c479c6ba36142ee9805e9f60fc4adfa22c
+Subproject commit 09911655b8dc1bffcd1e96c29d9c796ec8019d18
diff --git a/3rdparty/xxHash b/3rdparty/xxHash
index e626a72..c0b5ea9 160000
--- a/3rdparty/xxHash
+++ b/3rdparty/xxHash
@@ -1 +1 @@
-Subproject commit e626a72bc2321cd320e953a0ccf1584cad60f363
+Subproject commit c0b5ea995d66691734b1a79ad89e73a0d2fd5a53